<div dir="ltr">Damn, I thought I already fixed that but didn't. Hold while I rerun... I bet that was it.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 7, 2016 at 10:50 AM, Martin Basti <span dir="ltr"><<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>What does `hostname` command return?<br>
</p><div><div class="h5">
<br>
<div class="m_-170867553426931283moz-cite-prefix">On 07.12.2016 16:37, Joseph Flynn
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>Sorry, I wasn't clear in my earlier subject line. This
is related to the Lets Encrypt installation.<br>
<br>
</div>
I tried to pull some more relevant items from the log
below. I don't actually see all of the elements of my FQDN
(<a href="http://ipa-a.kkgpitt.org" target="_blank">ipa-a.kkgpitt.org</a>)
only references to the host (ipa-a) in the log, but am not
sure what a good log should include.<br>
<br>
</div>
Thanks for any assistance,<br>
</div>
Joe<br>
<br>
<div>
<div>
<div>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Dec 6, 2016 at 4:15
PM, Joseph Flynn <span dir="ltr"><<a href="mailto:jjflynn22@gmail.com" target="_blank">jjflynn22@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>
<div>Volunteers,<br>
<br>
I moved over to a Fedora VM
which was way more difficult
than it should be. All kinds of
problems with Guest Additions
and I ended up having to run
server mode with no GUI. Now I
run an Ubuntu VM from which I
ssh into my Fedora VM.
Anyway...<br>
<br>
</div>
The install made it a further step
than before. I get a quick blue
screen pop up at the end then an
error saying:<br>
<img src="cid:part3.3B340ED8.A0555500@redhat.com" alt="Inline image 1" width="530" height="294"><br>
<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span style="background-color:rgb(255,255,0)">An unexpected error occurred:<br>
The request message was
malformed :: DNS name does not
have enough labels<br>
Please see the logfiles in
/var/log/letsencrypt for more
details.</span><br>
</blockquote>
<br>
</div>
</div>
When I run the cert checker util I get
this<br>
<a href="https://www.sslshopper.com/ssl-checker.html#hostname=ipa-a.kkgpitt.org" target="_blank">https://www.sslshopper.com/ssl<wbr>-checker.html#hostname=ipa-a.<wbr>kkgpitt.org</a>
<br>
<br>
</div>
Full log below.<br>
<br>
</div>
Any suggestions? Is it not pulling my
proper hostname?<br>
<br>
</div>
Thanks,<br>
</div>
Joe<br>
<br>
<br>
<br>
<br>
<span style="background-color:rgb(217,210,233)"><br>
<span style="background-color:rgb(213,166,189)">[jjflynn22@ipa-a
~]$ cat /etc/hosts</span></span><br>
192.168.1.211<span style="background-color:rgb(213,166,189)"> <a href="http://ipa-a.kkgpitt.org" target="_blank">ipa-a.kkgpitt.org</a>
ipa-a</span><br>
127.0.0.1 localhost localhost.localdomain
localhost4 localhost4.localdomain4<br>
::1 localhost localhost.localdomain
localhost6 localhost6.localdomain6<br>
<br>
<br>
<br>
<br>
<span style="background-color:rgb(213,166,189)">[jjfly<span></span>nn22@ipa-a
~]$ sudo cat /var/log/letsencrypt/letsencry<wbr>pt.log</span><br>
[sudo] password for jjflynn22: <br>
2016-12-06 20:57:43,982:DEBUG:certbot.mai<wbr>n:Root
logging level set at 20<br>
2016-12-06 20:57:43,983:<a class="m_-170867553426931283moz-txt-link-freetext">INFO:certbot</a>.main<wbr>:Saving
debug log to /var/log/letsencrypt/letsencry<wbr>pt.log<br>
2016-12-06 20:57:43,991:DEBUG:certbot.mai<wbr>n:certbot
version: 0.9.3<br>
2016-12-06 20:57:43,991:DEBUG:certbot.mai<wbr>n:Arguments:
['--standalone', '--csr',
'/root/ipa-le/httpd-csr.der', '--email', '<a href="mailto:xxxxx@gmail.com" target="_blank">xxxxx@gmail.com</a>',
'--agree-tos']<br>
2016-12-06 20:57:43,99<span style="background-color:rgb(255,217,102)"><span></span></span>2:DEBUG:certbot.mai<wbr>n:Discovered
plugins: PluginsRegistry(PluginEntryPoi<wbr>nt#webroot,PluginEntryPoint#<wbr>null,PluginEntryPoint#manual,P<wbr>luginEntryPoint#standalone)<br>
2016-12-06 20:57:43,995:DEBUG:certbot.plu<wbr>gins.selection:Requested
authenticator standalone and installer None<br>
2016-12-06 20:57:44,019:DEBUG:certbot.plu<wbr>gins.selection:Single
candidate plugin: * standalone<br>
Description: Spin up a temporary webserver<br>
Interfaces: IAuthenticator, IPlugin<br>
Entry point: standalone =
certbot.plugins.standalone:Aut<wbr>henticator<br>
Initialized: <<a href="http://certbot.plugins.standalone.Au">certbot.plugins.standalone.Au</a><wbr>thenticator
object at 0x7fc3dc6fccd0><br>
Prep: True<br>
2016-12-06 20:57:44,019:DEBUG:certbot.plu<wbr>gins.selection:Selected
authenticator <<a href="http://certbot.plugins.standalone.Au">certbot.plugins.standalone.Au</a><wbr>thenticator
object at 0x7fc3dc6fccd0> and installer
None<br>
2016-12-06 20:57:44,115:DEBUG:certbot.mai<wbr>n:Picked
account: <Account(7446b15565eb5a2fc5850<wbr>f3ad97dc6dc)><br>
2016-12-06 20:57:44,116:DEBUG:root:Sendin<wbr>g
GET request to <a href="https://acme-v01.api.letsencrypt.org/directory" target="_blank">https://acme-v01.api.letsencry<wbr>pt.org/directory</a>.
args: (), kwargs: {}<br>
2016-12-06 20:57:44,119:<a class="m_-170867553426931283moz-txt-link-freetext">INFO:requests</a>.pac<wbr>kages.urllib3.connectionpool:<wbr>Starting
new HTTPS connection (1): <a href="http://acme-v01.api.letsencrypt.org" target="_blank">acme-v01.api.letsencrypt.org</a><br>
2016-12-06 20:57:44,500:DEBUG:<a href="http://requests.pa">requests.pa</a><wbr>ckages.urllib3.connectionpool:<wbr>"GET
/directory HTTP/1.1" 200 280<br>
2016-12-06 20:57:44,506:DEBUG:root:Receiv<wbr>ed
<Response [200]>. Headers:
{'Content-Length': '280', 'Expires': 'Tue, 06
Dec 2016 20:57:46 GMT', 'Boulder-Request-Id':
'mqxztXHk-k5DDBqftS_2vmB0sWVWV<wbr>jS1twToXbIOdL0',
'Strict-Transport-Security': 'max-age=604800',
'Server': 'nginx', 'Connection': 'keep-alive',
'Pragma': 'no-cache', 'Cache-Control':
'max-age=0, no-cache, no-store', 'Date': 'Tue,
06 Dec 2016 20:57:46 GMT', 'X-Frame-Options':
'DENY', 'Content-Type': 'application/json',
'Replay-Nonce': 'sz4mf6DlGO-Iw1q8bOlAlisD3CKZl<wbr>CZUA9JzmN3dcDk'}.
Content: '{\n "new-authz": "<a href="https://acme-v01.api.letsencrypt.org/acme/new-authz" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/new-authz</a>",\n
"new-cert": "<a href="https://acme-v01.api.letsencrypt.org/acme/new-cert" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/new-cert</a>",\n
"new-reg": "<a href="https://acme-v01.api.letsencrypt.org/acme/new-reg" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/new-reg</a>",\n
"revoke-cert": "<a href="https://acme-v01.api.letsencrypt.org/acme/revoke-cert" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/revoke-cert</a>"\n}'<br>
2016-12-06 20:57:44,506:DEBUG:acme.client<wbr>:Received
response <Response [200]> (headers:
{'Content-Length': '280', 'Expires': 'Tue, 06
Dec 2016 20:57:46 GMT', 'Boulder-Request-Id':
'mqxztXHk-k5DDBqftS_2vmB0sWVWV<wbr>jS1twToXbIOdL0',
'Strict-Transport-Security': 'max-age=604800',
'Server': 'nginx', 'Connection': 'keep-alive',
'Pragma': 'no-cache', 'Cache-Control':
'max-age=0, no-cache, no-store', 'Date': 'Tue,
06 Dec 2016 20:57:46 GMT', 'X-Frame-Options':
'DENY', 'Content-Type': 'application/json',
'Replay-Nonce': 'sz4mf6DlGO-Iw1q8bOlAlisD3CKZl<wbr>CZUA9JzmN3dcDk'}):
'{\n "new-authz": "<a href="https://acme-v01.api.letsencrypt.org/acme/new-authz" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/new-authz</a>",\n
"new-cert": "<a href="https://acme-v01.api.letsencrypt.org/acme/new-cert" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/new-cert</a>",\n
"new-reg": "<a href="https://acme-v01.api.letsencrypt.org/acme/new-reg" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/new-reg</a>",\n
"revoke-cert": "<a href="https://acme-v01.api.letsencrypt.org/acme/revoke-cert" target="_blank">https://acme-v01.api.letsencr<wbr>ypt.org/acme/revoke-cert</a>"\n}'<br>
2016-12-06 20:57:44,506:DEBUG:certbot.cli<wbr>ent:CSR:
CSR(file='/root/ipa-le/httpd-c<wbr>sr.der',
data='0\x82\x02x0\x82\x01`\x02<wbr>\x01\x000\x101\x0e0\x0c\x06\<wbr>x03U\x04\x03\x13\x05<span style="background-color:rgb(255,217,102)">ipa-</span><span style="background-color:rgb(255,217,102)">a</span>0\<wbr>x82\x01"0\r\x06\t*\x86H\x86\<wbr>xf7\r\x01\x01\x01\x05\x00\x03\<wbr>x82\x01\x0f\x000\x82\x01\n\<wbr>x02\x82\x01\x01\x00\xdau1L\xa6<wbr>T\xc8\x93\xc0P\x93\xb3\xd2\xcb
\xe2PU\xf0\x94=\x1c\n\x1e\xe5\<wbr>xfe\xed<\xfa\xb1d-\x92\xebeD\x<wbr>b1\x0eq9\xf1\xfa\xb5p\xdc\x12q<wbr>N\x96\x0b\x1f\x13\xab\xae<br>
<br>
.......<br>
<br>
99\xc0\xb0\x07N\xdd5\x9e1\xb8\<wbr>xdc\x8c\xc1N\xc1\x04\xa1\xd0\x<wbr>fc\xc2$f\x84e\xd4\xf7i\x1a\x1c<wbr>~,\x80\xea/~j\xea\xa2\xf3\xe9\<wbr>x96\xfe5j\xa4\xb4X\x12L\xd5\<wbr>xe5\xb0\x99|\xb8\xd1\xed\xa3\<wbr>xf2\xd5\xf0\x94\xc3"\xe8\x9dT\<wbr>x17\xcf\x12$oVE\x83\xd1\x96\<wbr>xac\xa1\xf9F\xd2mO\xe9$\xa7\<wbr>x00_\xaa\xc6\xa3j\xa1\xbaX8\<wbr>xa43K\x18os\xe1\xf4L(\xf9\xac\<wbr>'\xc5\x9a\xdc\xf5s\xc6`\x97\<wbr>xe6\xea\xf8\xcc\xfa\xe1U_\xff\<wbr>x86\xf0\x82\xab\xaf\xb9\x92q\<wbr>x06\x0f\xa5}]\x9c\xb1\x84b\<wbr>x85<\xed\x92,g\x0e\xeaoAi|\<wbr>xc5\n\x92',
form='der'), domains: [u'<span style="background-color:rgb(255,217,102)">ipa-a</span>']<br>
2016-12-06 20:57:44,507:DEBUG:root:Reques<wbr>ting
fresh nonce<br>
2016-12-06 20:57:44,507:DEBUG:root:Sendin<wbr>g
HEAD request to <a href="https://acme-v01.api.letsencrypt.org/acme/new-authz" target="_blank">https://acme-v01.api.letsencry<wbr>pt.org/acme/new-authz</a>.
args: (), kwargs: {}<br>
2016-12-06 20:57:44,608:DEBUG:<a href="http://requests.pa">requests.pa</a><wbr>ckages.urllib3.connectionpool:<wbr>"HEAD
/acme/new-authz HTTP/1.1" 405 0<br>
2016-12-06 20:57:44,609:DEBUG:root:Receiv<wbr>ed
<Response [405]>. Headers:
{'Content-Length': '91', 'Pragma': 'no-cache',
'Boulder-Request-Id': 'c2cMPhHqlO5kTv8xJ5dfIs4NCD2KM<wbr>qn8X-IxPzutDAI',
'Expires': 'Tue, 06 Dec 2016 20:57:46 GMT',
'Server': 'nginx', 'Connection': 'keep-alive',
'Allow': 'POST', 'Cache-Control': 'max-age=0,
no-cache, no-store', 'Date': 'Tue, 06 Dec 2016
20:57:46 GMT', 'Content-Type':
'application/problem+json', 'Replay-Nonce':
'3fq9edUYLFJwQKDU-oaLVpQdUglFe<wbr>mQpGNbwZ-AtmfI'}.
Content: ''<br>
2016-12-06 20:57:44,609:DEBUG:acme.client<wbr>:Storing
nonce: '\xdd\xfa\xbdy\xd5\x18,Rp@\xa0<wbr>\xd4\xfa\x86\x8bV\x94\x1dR\tEz<wbr>d)\x18\xd6\xf0g\xe0-\x99\xf2'<br>
2016-12-06 20:57:44,610:DEBUG:acme.jose.j<wbr>son_util:Omitted
empty fields: combinations=None,
challenges=None, expires=None, status=None<br>
2016-12-06 20:57:44,610:DEBUG:acme.client<wbr>:Serialized
JSON: {"identifier": {"type": "dns", "value":
"<span style="background-color:rgb(255,217,102)">ipa-a</span>"},
"resource": "new-authz"}<br>
2016-12-06 20:57:44,610:DEBUG:acme.jose.j<wbr>son_util:Omitted
empty fields: kid=None, x5c=(), crit=(),
jwk=None, typ=None, jku=None, cty=None,
x5tS256=None, x5u=None, alg=None, x5t=None<br>
2016-12-06 20:57:44,612:DEBUG:acme.jose.j<wbr>son_util:Omitted
empty fields: kid=None, x5c=(), crit=(),
typ=None, jku=None, cty=None, x5tS256=None,
x5u=None, x5t=None, nonce=None<br>
2016-12-06 20:57:44,612:DEBUG:root:Sendin<wbr>g
POST request to <a href="https://acme-v01.api.letsencrypt.org/acme/new-authz" target="_blank">https://acme-v01.api.letsencry<wbr>pt.org/acme/new-authz</a>.
args: (), kwargs: {'data': '{"header": {"alg":
"RS256", "jwk": {"e": "AQAB", "kty": "RSA",
"n": "vmM8XoN-WDCdPcaMNxu9zlLEJBBN-<wbr>W_pIkG-Afw5uawBBXWHbWyzUeb06Ly<wbr>pMM94LcTi0drWTf00Fdv5SiVKMAwwA<wbr>oqH-Xzv5LHBwYmqNFGr-W6cphQjNTP<wbr>21IP87NKxG87OdvvOMjE--oMuJJMYW<wbr>byAAcOZNhIobWp969EMGu9Oi5JeQI1<wbr>bLqIHS317xWDPD_EMTmhnVxZGBuS5g<wbr>s_ObYejnJmGyu4_Bn1yLIDlBuphYsH<wbr>g0pWoAgjZQAr3NI4N7oVrB-LiW21-<wbr>k9I-LH3dijxVLBe_7jfKsIsVTJyzMz<wbr>l-g2iAeogYHfRngkhnQVXfhSleeZbf<wbr>HwKXPs5FdmnHBw"}},
"protected": "eyJub25jZSI6ICIzZnE5ZWRVWUxGS<wbr>ndRS0RVLW9hTFZwUWRVZ2xGZW1RcEd<wbr>OYndaLUF0bWZJIn0",
"payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlI<wbr>jogImRucyIsICJ2YWx1ZSI6ICJpcGE<wbr>tYSJ9LCAicmVzb3VyY2UiOiAibmV3L<wbr>WF1dGh6In0",
"signature": "sDGSJkUMIFVRr7YGU33exEVslJFZl<wbr>ZoTuyv74F_XtloybjzZFg81r8ONbCU<wbr>XtU6Q1COsA1M9df_vpL1b8Pz2bhfgE<wbr>kG7taiaHDEyK-PGx5cn9U4vgSp3uZM<wbr>NfVGFK-0gSYxLIsI0AgEIV8rTVKVw5<wbr>kHVhn8Ob7gCuBgz1QkGr8WefqAcJ6v<wbr>xycvbPBXh3GlpHylKDNTEsH5kbdKtf<wbr>g5bKJu8RDLFBhAZCFub61EwkeT7Hfv<wbr>hsWkaXJQhoolWiFn_3PjAZCEZzPL5i<wbr>gCOW0V65OEp6O3wdnC4FwS0BwxE0Cx<wbr>B2QA2mXMdvX4SILRf5mhzhTOmdTL0g<wbr>LYXffI1XErbvg"}'}<br>
2016-12-06 20:57:44,728:DEBUG:<a href="http://requests.pa">requests.pa</a><wbr>ckages.urllib3.connectionpool:<wbr>"POST
/acme/new-authz HTTP/1.1" 400 109<br>
2016-12-06 20:57:44,730:DEBUG:root:Receiv<wbr>ed
<Response [400]>. Headers:
{'Content-Length': '109',
'Boulder-Request-Id': 'z34CxBq8_BBQbE6zM00YjU8c08FeX<wbr>h24WHyCG1xAYJE',
'Expires': 'Tue, 06 Dec 2016 20:57:46 GMT',
'Server': 'nginx', 'Connection': 'close',
'Cache-Control': 'max-age=0, no-cache,
no-store', 'Pragma': 'no-cache',
'Boulder-Requester': '6994631', 'Date': 'Tue,
06 Dec 2016 20:57:46 GMT', 'Content-Type':
'application/problem+json', 'Replay-Nonce': 'YoSNpLT1RJSN5tUVEWujrxjZ4LxoU<wbr>-jKncsn1aN9HFI'}.
<span style="background-color:rgb(255,255,0)">Content:
'{\n "type": "urn:acme:error:malformed",\n
"detail": "DNS name does not have enough
labels",\n "status": 400\n}'</span><br>
2016-12-06 20:57:44,730:DEBUG:acme.client<wbr>:Storing
nonce: "b\x84\x8d\xa4\xb4\xf5D\x94\x8<wbr>d\xe6\xd5\x15\x11k\xa3\xaf\x18<wbr>\xd9\xe0\xbchS\xe8\xca\x9d\xcb<wbr>'\xd5\xa3}\x1cR"<br>
2016-12-06 20:57:44,730:DEBUG:acme.client<wbr>:Received
response <Response [400]> (headers:
{'Content-Length': '109',
'Boulder-Request-Id': 'z34CxBq8_BBQbE6zM00YjU8c08FeX<wbr>h24WHyCG1xAYJE',
'Expires': 'Tue, 06 Dec 2016 20:57:46 GMT',
'Server': 'nginx', 'Connection': 'close',
'Cache-Control': 'max-age=0, no-cache,
no-store', 'Pragma': 'no-cache',
'Boulder-Requester': '6994631', 'Date': 'Tue,
06 Dec 2016 20:57:46 GMT', 'Content-Type':
'application/problem+json', 'Replay-Nonce': 'YoSNpLT1RJSN5tUVEWujrxjZ4LxoU<wbr>-jKncsn1aN9HFI'}):
'{\n "type": "urn:acme:error:malformed",\n
"detail": "DNS name does not have enough
labels",\n "status": 400\n}'<br>
2016-12-06 20:57:44,735:DEBUG:certbot.mai<wbr>n:Exiting
abnormally:<br>
Traceback (most recent call last):<br>
File "/usr/bin/letsencrypt", line 9, in
<module><br>
load_entry_point('certbot==0.9<wbr>.3',
'console_scripts', 'certbot')()<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/certbot/main.py",
line 776, in main<br>
return config.func(config, plugins)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/certbot/main.py",
line 566, in obtain_cert<br>
_csr_obtain_cert(config, le_client)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/certbot/main.py",
line 535, in _csr_obtain_cert<br>
certr, chain =
le_client.obtain_certificate_f<wbr>rom_csr(config.domains,
csr, typ)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/certbot/client.py",
line 229, in obtain_certificate_from_csr<br>
authzr = self.auth_handler.get_authoriz<wbr>ations(domains)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/certbot/auth_handler.py",
line 68, in get_authorizations<br>
domain, self.account.regr.new_authzr_u<wbr>ri)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/acme/client.py",
line 210, in request_domain_challenges<br>
typ=messages.IDENTIFIER_FQDN,
value=domain), new_authzr_uri)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/acme/client.py",
line 190, in request_challenges<br>
new_authz)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/acme/client.py",
line 649, in post<br>
return self._check_response(response,
content_type=content_type)<br>
File "/usr/lib/python2.7/site-packa<wbr>ges/acme/client.py",
line 565, in _check_response<br>
raise messages.Error.from_json(jobj)<br>
Error: urn:acme:error:malformed :: The request
message was malformed :: DNS name does not
have enough labels<br>
<br>
<span style="background-color:rgb(255,255,0)"></span><br>
<br>
<div>
<div>
<div>
<div>
<div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="m_-170867553426931283mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</div></div></div>
</blockquote></div><br></div>